Linux Kernel PTDMA Driver Null Pointer Dereference Vulnerability on AMD Systems

Vulnerability

A vulnerability in the Linux kernel's PTDMA driver can lead to a null pointer dereference, causing a system panic on AMD machines. This issue typically arises during host shutdown after the PTDMA driver has been active. The problem stems from the 'pt_issue_pending()' function, which incorrectly assumes that there will always be at least one descriptor in the Submitted queue. In reality, both the Submitted and Issued queues can be empty, leading to the 'pt_cmd_callback()' function being called with a null pointer.

Impact

Exploitation of this vulnerability causes a system panic, leading to a denial of service.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel's official website.

Added: Dec 8, 2025, 2:35 AM
Updated: Dec 8, 2025, 2:35 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
7.7
relevance
1.4
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.